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DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this 
Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in 
public use or on sale in this country, more than one year prior to the date of application for patent in 
the United States. 

2. Claims 1, 3, 14, and 16 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Osborn, USPN 6,026,293. 

With regard to claims 1 and 14, Osborn discloses a system to uniquely 
identify a security device (SIM card), the security device coupled to a computing 
device (mobile phone), the computing device coupled to a server over a 
computer network (column 1 lines 55-60), the security device storing a serial 
number associated with the security device (ESN) and a user key associated 
with the serial number (secret key) that is unique to the security device (column 2 
lines 59-60in a secure memory (SIM card), a server (base station) coupled to a 
user information database storing a plurality of registered serial numbers (column 
3 lines 2-5) and a plurality of user keys, each user key being associated with one 
of the plurality of registered serial numbers (column 3 lines 23-24) wherein, when 
the computing device attempts to log onto the server over the computer network 
(column 2 line 50), the server requests a serial number from the security device 
(column 2 line 50-54), verifies whether the serial number received from the 
security device is stored as one of the plurality of registered serial numbers in the 
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user information database (column 3 lines 2-7); if the serial number is stored 
within the user information database, the server obtains the associated user key 
and computes a challenge (column 3 lines 20-28) and computes an expected 
response based on the associated user key (column 3 lines 31-33), the server 
sends the challenge to the security device over the computer network (column 3 
lines 26-28), and if the server receives a response back from the security device 
in response to the challenge that matches the expected response, the server 
allows the computing device to log onto the server (column 3 lines 33-38). 

With regard to claims 3 and 16, Osborn discloses the security device 
contains a microprocessor and memory (column 7 lines 65-66). 

Claim Rejections - 35 USC § 103 

3. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for 
all obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described 
as set forth in section 1 02 of this title, if the differences between the subject matter sought to 
be patented and the prior art are such that the subject matter as a whole would have been 
obvious at the time the invention was made to a person having ordinary skill in the art to which 
said subject matter pertains. Patentability shall not be negatived by the manner in which the 
invention was made. 

4. Claims 4, 9-13, 17, and 22-26 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Osborn. 

With regard to claim 4, Osborn discloses the key and algorithm are only 
used one-way (column 3 lines 24-36), but does not specify using a hash as this 
algorithm is necessarily a one-way hash. Osborn further discloses that one-way 
hash functions are good one-way functions (column 12 lines 37-42). I would have 
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been obvious to use a one-way hash function for the algorithm for Osborn's given 
motivation that it is hard to falsify. 

With regard to claims 9-13 and 22-26, Osborn discloses cell phone 
authentication as outlined above, and discloses downloading content to the 
phone (column 10 lines 52-54), but does not disclose downloading encrypted 
content and an encrypted key to decrypt the content. The examiner takes official 
notice that it is well known to send encrypted content with an encrypted key and 
an expiration date. It would have been obvious for one of ordinary skill in the art 
to have the base station send temporary content and an encrypted content key 
and to encrypt the content with that key to add a level of security and to not 
overuse the phone's private key. 

Conclusion 

5. Any inquiry concerning this communication or earlier communications from 
the examiner should be directed to Jacob Lipman whose telephone number is 
571-272-3837. The examiner can normally be reached on M-Th 7 AM-3 PM. 

If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Jacques Louis-Jacques can be reached on 571-272- 
6962. The fax phone number for the organization where this application or 
proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from 
the Patent Application Information Retrieval (PAIR) system. Status information 
for published applications may be obtained from either Private PAIR or Public 
PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair- 
direct.uspto.gov. Should you have questions on access to the Private PAIR 
system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll- 
free). 
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